Add DEMO feature to the project

Tiltfile

@@ -92,6 +92,7 @@ build_python_service('pos-service', 'pos')
 build_python_service('orders-service', 'orders')
 build_python_service('production-service', 'production')
 build_python_service('alert-processor', 'alert_processor')
+build_python_service('demo-session-service', 'demo_session')
 
 # =============================================================================
 # RESOURCE DEPENDENCIES & ORDERING
@@ -111,6 +112,7 @@ k8s_resource('suppliers-db', labels=['databases'])
 k8s_resource('pos-db', labels=['databases'])
 k8s_resource('orders-db', labels=['databases'])
 k8s_resource('production-db', labels=['databases'])
+k8s_resource('demo-session-db', labels=['databases'])
 
 k8s_resource('redis', labels=['infrastructure'])
 k8s_resource('rabbitmq', labels=['infrastructure'])
@@ -130,11 +132,41 @@ k8s_resource('pos-migration', resource_deps=['pos-db'], labels=['migrations'])
 k8s_resource('orders-migration', resource_deps=['orders-db'], labels=['migrations'])
 k8s_resource('production-migration', resource_deps=['production-db'], labels=['migrations'])
 k8s_resource('alert-processor-migration', resource_deps=['alert-processor-db'], labels=['migrations'])
+k8s_resource('demo-session-migration', resource_deps=['demo-session-db'], labels=['migrations'])
 
 # Alert processor DB
 k8s_resource('alert-processor-db', labels=['databases'])
 
+# =============================================================================
+# DEMO INITIALIZATION JOBS
+# =============================================================================
+# Demo seed jobs run in strict order:
+#   1. demo-seed-users (creates demo user accounts)
+#   2. demo-seed-tenants (creates demo tenant records)
+#   3. demo-seed-inventory (creates ingredients & finished products)
+#   4. demo-seed-ai-models (creates fake AI model entries)
+
+k8s_resource('demo-seed-users',
+    resource_deps=['auth-migration'],
+    labels=['demo-init'])
+
+k8s_resource('demo-seed-tenants',
+    resource_deps=['tenant-migration', 'demo-seed-users'],
+    labels=['demo-init'])
+
+k8s_resource('demo-seed-inventory',
+    resource_deps=['inventory-migration', 'demo-seed-tenants'],
+    labels=['demo-init'])
+
+k8s_resource('demo-seed-ai-models',
+    resource_deps=['training-migration', 'demo-seed-inventory'],
+    labels=['demo-init'])
+
+# =============================================================================
+# SERVICES
+# =============================================================================
 # Services depend on their databases AND migrations
+
 k8s_resource('auth-service',
     resource_deps=['auth-migration', 'redis'],
     labels=['services'])
@@ -191,8 +223,33 @@ k8s_resource('alert-processor-service',
     resource_deps=['alert-processor-migration', 'redis', 'rabbitmq'],
     labels=['services'])
 
+k8s_resource('demo-session-service',
+    resource_deps=['demo-session-migration', 'redis'],
+    labels=['services'])
+
+# Get the image reference for inventory-service to use in demo clone jobs
+inventory_image_ref = str(local('kubectl get deployment inventory-service -n bakery-ia -o jsonpath="{.spec.template.spec.containers[0].image}" 2>/dev/null || echo "bakery/inventory-service:latest"')).strip()
+
+# Apply environment variable patch to demo-session-service with the inventory image
+local_resource('patch-demo-session-env',
+    cmd='kubectl set env deployment/demo-session-service -n bakery-ia CLONE_JOB_IMAGE=' + inventory_image_ref,
+    resource_deps=['demo-session-service'],
+    labels=['config'])
+
+# =============================================================================
+# CRONJOBS
+# =============================================================================
+
+k8s_resource('demo-session-cleanup',
+    resource_deps=['demo-session-service'],
+    labels=['cronjobs'])
+
+# =============================================================================
+# GATEWAY & FRONTEND
+# =============================================================================
 # Gateway and Frontend depend on services being ready
 # Access via ingress: http://localhost (frontend) and http://localhost/api (gateway)
+
 k8s_resource('gateway',
     resource_deps=['auth-service'],
     labels=['frontend'])